Vulnerabilities

TI-2022-15608 CVE-2022-34801 · GHSA-7298-w54j-q7wm

Cleartext transmission of sensitive information in Jenkins Build Notifications Plugin

LOW 21

Jenkins Build Notifications Plugin 1.5.0 and earlier transmits tokens in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00524 Published 2022-06-30 No fix listed CWE-319

TI-2022-15607 CVE-2022-34800 · GHSA-v3r8-6vfj-pppf

Insufficiently protected credentials in Jenkins Build Notifications Plugin

LOW 21

Jenkins Build Notifications Plugin 1.5.0 and earlier stores tokens unencrypted in its global configuration files on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file syst…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00604 Published 2022-06-30 No fix listed CWE-522

Vulnerabilities

Filters

Cleartext transmission of sensitive information in Jenkins Build Notifications Plugin

Insufficiently protected credentials in Jenkins Build Notifications Plugin